Graphic Designs
-
Evil Shield Grunge Vector
I’m going to have to fly more, since I get time (and inspiration) when I’m -
Gun Skull – more grunge!
I’m going to have to fly more, since I get time (and inspiration) when I’m - More from this category
My Music
-
Acquiescence
ACQUIESCENCE Listen … Here’s all the tracks from the CD. You can listen to them -
Redemption
REDEMPTION Listen … Here’s all the tracks from the CD. You can listen to them - More from this category
IT and Security
-
The art of technology
…and it is an art. This is from the perspective of a technology leader seeing -
WPA is hackable?
I attended a track at Blackhat last week whereby WPA can be hacked by using - More from this category
Thoughts, Ideas and Musings
-
10 Amazing Life Lessons You Can Learn From Albert Einstein
Albert Einstein has long been considered a genius by the masses. He was a theoretical -
Five Key Lines From President’s Speech
Finally we have a President that has balls – finally we have a President that - More from this category
Other Recent Articles
-
OWASP Top Ten
From the OWASP website – I thought it was pertinent to post the OWASP top ten. We all know what they are but there is some great information wrapped in the description. For the full write up and a lot more useful information visit the OWASP website HERE. The OWASP Top 10 Web Application Security [...]
-
American Express Security – FAIL!
I came upon this from a twitter post – check it out! American Express have an insecure web form. They actually ask you to click on a link if you want a secure web form. Wow – talk about conflict of interest. Consider the stringent PCI requirements that Amex put corporations under, with some pretty [...]
-
8 Phony ‘Bargains’ and Better Alternatives
I saw this on Yahoo Finance, provided by CBSMoneywatch.com and written by by Caroline E. Mayer, and thought it deserved a repost. It’s confusing enough to think about credit reports etc - below are good guidelines to follow. Big discounts! Big sales! Big freebies! Enticing deals abound, but you need to distinguish those from the [...]
-
Social Engineer Toolkit – Website Attack How To
I found this while wandering about the web. Be careful – it works! Social Engineering Toolkit – Website Attack How To As with all things “hack” – be careful how you proceed. The opportunity to hack is always there – the ability to show constraint and remain ethical is a necessity! ‘Nuff said. Enjoy.
-
A db_autopwn script run from msfconsole
Here’s a handy script I found on the web, written by HD Moore himself. It works like a charm! $ vim ownitall.rc db_create /tmp/mynet.db db_nmap -sS -F -n 192.168.0.0/24 -T5 setg AutoRunScript scraper db_autopwn -t -e -p -r $ msfconsole -r ownitall.rc Have fun with it.
-
How to Reliably Crash the iPhone’s E-mail Client
From https://secure.grepular.com/ by by Mike Cardwell I have tested the following on two separate iPhones and it caused crashes on them both. I don’t have an iPhone of my own to test with, so I’m not able to investigate this much further. 1.) Create a blank file named anything.txt and then upload it to some [...]
-
CISOs Keep Breach Costs Lower
The latest “Cost of a Data Breach” survey from the Ponemon Institute finds companies with a CISO are better able to handle loss of sensitive information By Joan Goodchild, Senior Editor Companies continue to pay a high price to clean up the mess created by a data breach, but having a Chief Information Security Officer [...]
-
Companies on IT Security Spending: Where’s the ROI?
Companies have spent millions to bolster their IT security in recent years. But some are starting to wonder if it’s been worth it, according to the 2010 Cyber Security Watch survey CSO conducted with the U.S. Secret Service, Carnegie Mellon University CERT and Deloitte & Touche. By Bill Brenner, Senior Editor, CSO Online Companies have [...]
-
Your 5-Step Malware-Analysis Toolkit
From http://www.campustechnology.com By Lenny Zeltser A LARGE NUMBER of computer intrusions involve some form of malicious software (malware), which finds its way to the victim’s workstation or to a server. When investigating the incident, the IT responder typically seeks to answer questions such as: What actions can the malware specimen perform on the system? How [...]
-
How to convert email addresses into name, age, ethnicity, sexual orientation
From: http://maxklein.posterous.com/ So you have somehow begged, borrowed or stolen an email list of 1000 users who you believe are interested in your new service. Would it not be great if you could somehow convert that list into real people, with real photos, and perhaps even more concrete information like “My service has a higher [...]
-
RockYou Hack: From Bad To Worse
From Techcrunch.com – by Nik Cubrilovic Earlier today news spread that social application site RockYou had suffered a data breached that resulted in the exposure of over 32 Million user accounts. To compound the severity of the security breach, it was found that RockYou are storing all user account data in plain text in their [...]
-
The Many Evil Ways to Make Money Online
From http://www.consumingexperience.com/ Currently, the main evil ways people make money off the Internet (i.e. take money from innocent you & me!) are: Phishing – impersonating bank web sites in order to steal people’s banking details Selling pharmaceuticals online – Viagra, of course; selling prescription drugs to people who don’t have a prescription Selling cameras etc [...]
-
Malware that operates as a Firefox extension
Here’s a good overview of malware that operates as a Firefox extension. The PDF is by Symantec via Lenny Zeltser.
-
Man-in-the-middle attacks demoed on 4 smartphones
Security researchers from SMobile Systems have released a paper detailing successful man-in-the-middle attacks against several smartphones. The SSL enabled log in sessions on the tested, Nokia N95, HTC Tilt, Android G1 and iPhone 3GS devices was sniffed using the publicly available SSLstrip tool, with the attack taking place over insecure Wi-Fi network, now prevalent literally [...]
-
How to Disrupt a Botnet
How to Disrupt a Botnet by Lenny Zeltser The following note is inspired by the steps the folks at FireEye Malware Intelligence Lab took to disable the Mega-d/Ozdok bot network. People often wonder what it takes to shut down a botnet. Here are the key steps, which apply to “traditional” botnets, which don’t rely heavily [...]
-
News
Move your mouse over image or click to enlarge News is a clean and simple-yet-elegant, professionally designed web template built using Photoshop, that can be used for a standard website, a wordpress blog, or any blog for that matter. This purchase is ONLY the PSD file. This design is an adaptation of a photoshop tutorial [...]
-
Torn Portfolio
Move your mouse over image or click to enlarge Torn Portfolio is a clean yet grungy, professionally designed web template built using Photoshop, that can be used for a standard website, a wordpress blog, or any blog for that matter. This purchase is ONLY the PSD file. This design is an adaptation of a photoshop [...]
- All Recent Articles





